You now have seen all the pieces that make up a PKI, so it is time to put the pieces together and understand where each piece fits into the overall picture.
A Registration Authority that reviews Certificate-Signing Requests (CSRs) and either rejects the request or approves it and hands it off to the Certification Authority for issuance. This includes some way for users to submit CSRs, either by a web page or some protocol. ...